Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
File: _BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft (raw, json)
Hash identifier: txYoSWjpqelAijoBYFWoGmUxgkuDJdRiK3VXNNXn6VI=
Subject key identifier: 66:9A:62:E5:5A:A1:32:C1:B4:40:47:00:94:89:E4:68:5E:7E:C4:C4
Authority key identifier: FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08
Certificate issuer: /CN=fc157d396ed992843daeef7b9cca73b043966c08
Certificate serial: 019A71130EB410EA57769DC35419512AF212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
Manifest number: 0225
Signing time: Tue 11 Nov 2025 04:01:05 +0000
Manifest this update: Tue 11 Nov 2025 04:01:05 +0000
Manifest next update: Wed 12 Nov 2025 04:01:05 +0000
Files and hashes: 1: _BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl (hash: MZcuIMALRukO/ZJYqsySNcXhaSOLFL29lAATuQ8iPNQ=)
2: d3aJ-4s3b0XQhPZWIMC7alyfBOU.roa (hash: lUrFbjaMQOBwh3PKz+J4c1ZHgMiiHoAtuygvxP3srTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:0e:b4:10:ea:57:76:9d:c3:54:19:51:2a:f2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc157d396ed992843daeef7b9cca73b043966c08
Validity
Not Before: Nov 11 04:01:05 2025 GMT
Not After : Nov 12 04:01:05 2025 GMT
Subject: CN=669a62e55aa132c1b44047009489e4685e7ec4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:55:dd:5b:a5:e6:52:53:07:0a:5c:1e:73:9b:
88:0e:a8:d7:dd:29:78:f0:b4:a1:43:51:cd:a3:5f:
ce:4d:53:29:19:d6:77:59:b3:e8:eb:c5:20:fa:d7:
78:17:e6:dd:de:4d:02:ce:11:7a:92:cf:c7:ad:52:
90:f8:6a:0d:1f:e3:ed:46:4a:89:ea:18:eb:1e:22:
1f:57:31:2e:16:8a:b3:a3:fc:77:48:34:7e:04:7b:
ee:b8:f5:f3:a0:3d:fb:e6:fe:af:a5:b1:6c:8a:93:
83:96:af:fb:46:5b:cd:e7:da:78:47:9c:64:99:60:
9f:cc:54:e6:0c:3e:00:a0:f3:b4:0b:81:22:80:e8:
0f:ec:04:36:7b:e8:16:e4:0c:88:7c:ed:fc:c0:14:
4a:ed:d8:84:08:ce:8c:c8:a5:64:d2:e8:23:89:fe:
d3:9d:c5:8b:e5:4a:ff:f7:bf:10:bd:13:32:7e:81:
07:b0:b1:1a:22:b3:59:9a:b3:a6:58:89:0f:62:09:
f2:23:32:28:c5:7e:0e:43:eb:3d:7e:36:86:09:ce:
5e:1c:f0:4d:24:2f:9a:83:64:6e:e4:b5:8d:09:99:
e6:44:3a:ce:5e:96:55:ff:b2:bf:b9:c3:45:42:b7:
f7:3d:50:ae:82:d0:ec:79:a6:de:14:16:41:bf:47:
1d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9A:62:E5:5A:A1:32:C1:B4:40:47:00:94:89:E4:68:5E:7E:C4:C4
X509v3 Authority Key Identifier:
keyid:FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:74:7d:4f:65:c0:62:92:39:5b:a1:e4:78:a7:f8:6f:80:5e:
d3:f6:8a:2a:c2:8f:2b:7a:f2:fb:c0:5a:65:f0:2b:a9:1b:1f:
e0:35:01:10:8e:4b:0a:55:89:64:23:77:3d:8d:33:9b:f6:b6:
c0:2c:47:a8:61:0c:72:de:8a:0e:ac:b0:68:df:fa:42:91:dc:
14:39:d4:d0:b0:d0:e0:c2:16:d1:5d:1a:6d:76:36:7e:80:27:
f2:0f:f4:68:59:d7:50:22:d6:dc:76:23:4d:28:75:cf:4c:6d:
c6:e2:38:1f:fe:74:60:8a:db:6e:25:9a:44:0f:9e:8c:9c:46:
96:49:df:86:cb:ad:b9:de:72:67:bd:a8:89:07:5a:c6:70:5e:
a1:c2:39:7c:ab:40:8f:99:fa:b2:ea:4d:b4:73:03:15:f7:8e:
64:d9:ee:9d:53:ae:12:83:cb:94:12:05:73:b1:71:ac:55:31:
4b:88:23:cd:1b:23:91:b1:ad:f3:9b:1d:c8:9d:07:97:2c:1f:
d2:91:96:b4:5e:9b:4c:9c:e6:96:49:5d:da:2d:ca:74:b9:3d:
c0:c6:8c:dd:17:e1:6c:8a:99:bf:e4:a4:e7:24:7a:fe:e0:b7:
57:68:07:3a:4b:f9:7b:19:d4:22:90:58:57:3d:7b:e0:c9:7c:
b0:f0:47:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEw60EOpXdp3DVBlRKvISMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMTU3ZDM5NmVkOTkyODQzZGFlZWY3YjljY2E3M2IwNDM5
NjZjMDgwHhcNMjUxMTExMDQwMTA1WhcNMjUxMTEyMDQwMTA1WjAzMTEwLwYDVQQD
Eyg2NjlhNjJlNTVhYTEzMmMxYjQ0MDQ3MDA5NDg5ZTQ2ODVlN2VjNGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVXdW6XmUlMHClwec5uIDqjX3Sl4
8LShQ1HNo1/OTVMpGdZ3WbPo68Ug+td4F+bd3k0CzhF6ks/HrVKQ+GoNH+PtRkqJ
6hjrHiIfVzEuFoqzo/x3SDR+BHvuuPXzoD375v6vpbFsipODlq/7RlvN59p4R5xk
mWCfzFTmDD4AoPO0C4EigOgP7AQ2e+gW5AyIfO38wBRK7diECM6MyKVk0ugjif7T
ncWL5Ur/978QvRMyfoEHsLEaIrNZmrOmWIkPYgnyIzIoxX4OQ+s9fjaGCc5eHPBN
JC+ag2Ru5LWNCZnmRDrOXpZV/7K/ucNFQrf3PVCugtDseabeFBZBv0cd+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGaaYuVaoTLBtEBHAJSJ5GhefsTEMB8GA1UdIwQY
MBaAFPwVfTlu2ZKEPa7ve5zKc7BDlmwIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0JWOU9XN1prb1E5cnU5N25NcHpzRU9XYkFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mY2VhNTAtZmU0Ny00NjY0LTkyNjct
YzBkY2NkYjdhOTA1LzEvX0JWOU9XN1prb1E5cnU5N25NcHpzRU9XYkFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9mY2VhNTAtZmU0Ny00NjY0LTkyNjctYzBkY2NkYjdhOTA1
LzEvX0JWOU9XN1prb1E5cnU5N25NcHpzRU9XYkFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMHR9T2XA
YpI5W6HkeKf4b4Be0/aKKsKPK3ry+8BaZfArqRsf4DUBEI5LClWJZCN3PY0zm/a2
wCxHqGEMct6KDqywaN/6QpHcFDnU0LDQ4MIW0V0abXY2foAn8g/0aFnXUCLW3HYj
TSh1z0xtxuI4H/50YIrbbiWaRA+ejJxGlknfhsutud5yZ72oiQdaxnBeocI5fKtA
j5n6supNtHMDFfeOZNnunVOuEoPLlBIFc7FxrFUxS4gjzRsjkbGt85sdyJ0Hlywf
0pGWtF6bTJzmlkld2i3KdLk9wMaM3RfhbIqZv+Sk5yR6/uC3V2gHOkv5exnUIpBY
Vz174Ml8sPBHlA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:00 2025 by rpki-client